waterviz.org

- University of New Hampshire -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 91:08:c1:02:0e:38:12:5e:5d:91:c7:5a:1e:ea:de:8d was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of New Hampshire

Organization: University of New Hampshire
Organization unit: Research Computing
Address: 105 Main Street
Postal code: 03824
State / Province: New Hampshire
Locality: Durham
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 91:08:c1:02:0e:38:12:5e:5d:91:c7:5a:1e:ea:de:8d
Serial Number (int): 192783512431591486719731038803142041229
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 52:48:42:5f:a3:79:3c:26:6b:b0:7f:4b:f5:9f:66:c5:fb:ff:e0:c9
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): ec:dd:db:3e:61:6c:36:14:a5:1f:f4:87:a4:08:da:b6:f7:35:a3:13
Fingerprint (sha256): 0a:5e:d0:55:b0:74:da:95:8e:cc:d8:8a:eb:74:6d:fe:f8:85:f7:1e:15:15:65:b2:07:20:d6:68:f9:a0:71:a7

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate waterviz.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waterviz.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

waterviz.org
waterviz.sr.unh.edu
www.waterviz.org

Other certificates including the domain name waterviz.org

(limited to 100 certificates)
waterviz.org
waterviz.org

Certificate

The complete raw certificate details for waterviz.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 192783512431591486719731038803142041229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '03824'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Durham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '105 Main Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Research Computing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waterviz.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723551299365436258647241957685046912462089020722737008523699800693258627822691664932504548960938196457814942379108941570863591073054353333213627880613302030234994213754529095488817501555600214747203032736169693834931895695638002904242182369694450729642273082449267487565695915540185645121546894896718087680691851630526889564154105937812604460845876598732425950794472231785363694278954842627435111525378726000983939883092265267281069615655094619560531987831263559545351666142424821607132703009487819910786283036758665495887006983133359331226476464456715319423131285039206903942894711635602458300992569571068759280048504193297803252074944068205386845284246992764760021090421486659811371996682961634096258069980394189767499154706079036837670803527794489412296126555425280254211251579927913636362640063920622590858156923292212834087128286706201434612399777695114614545848612643133749840833113692475961438689590379188099717351318142923643694109897062865567969303431699972774532618744669868100931235835158354289760660099158093153219232328829622226592666345886438476249679661759556171140990586687726213006120988910028148713888847494516274895030047648261843970701578977226730223900226588825664776727326581072986611755110086932345447446510511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5248425fa3793c266bb07f4bf59f66c5fbffe0c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterviz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterviz.sr.unh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterviz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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